Kidaze CourseSelectionSystem SQL Injection Vulnerability in COUNT3s7.php
Vulnerability
A SQL injection vulnerability has been identified in the Kidaze CourseSelectionSystem, specifically in version 1.0 prior to commit 42cd892b40a18d50bd4ed1905fa89f939173a464. The issue resides in the file '/Profilers/PriProfile/COUNT3s7.php', where the 'cbe' parameter is manipulated, allowing attackers to inject malicious SQL queries. This vulnerability can be exploited remotely, without any authentication.
Impact
Exploitation of this vulnerability allows for unauthorized database access, manipulation of data, and potential disruption of services. It poses a significant risk to the overall security of the system and the integrity of its data.
Reproduction
The vulnerability can be reproduced by sending a POST request to '/Profilers/PriProfile/COUNT3s7.php' with the 'cbe' parameter. The injection can be crafted using boolean-based or time-based payloads to exploit the SQL injection vulnerability.
Remediation
It is recommended to use prepared statements and parameter binding to prevent SQL injection, validate and filter user input, minimize database user permissions, and conduct regular security audits.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.